Cybersecurity — 2026-04-09

Iran-Linked Handala Group Claims Breach of Former IDF Chief Halevi's Phone, Leaks 19,000 Files

Pro-Iranian hacking group Handala claimed to have compromised former IDF chief of staff Herzi Halevi's phone over a multi-year operation, publishing approximately 19,000 files including footage of secret meetings, strategic maps, and classified personnel identities. Published materials showed Halevi meeting his Jordanian counterpart and photos from a meeting with former CENTCOM chief Kurilla in Qatar. The timing, one day after the US-Iran ceasefire announcement, is assessed as a deliberate psychological warfare operation.

Analysis
The 19,000-file claim rests entirely on Handala's own assertion; the IDF has not confirmed or denied the breach. If the claimed multi-year access to a former IDF chief of staff's phone is legitimate, the intelligence damage extends far beyond the published photos. The footage of meetings with Jordanian and CENTCOM counterparts suggests potential exposure of allied operational planning and bilateral intelligence sharing. The timing, one day post-ceasefire, positions this as both psychological warfare and a signal of Iranian intelligence capability.
3 sources
  1. Hackers say they obtained at least 19,000 files from ex-Israeli army chief Halevi's phone - Middle East Eye
  2. Iran-linked hackers leak photos of ex-IDF chief Halevi's work and family life - Times of Israel
  3. Pro-Iranian hacking group Handala claims breaching ex-IDF chief Halevi's phone - Jerusalem Post

View in full brief →

UNCLASSIFIED // OPEN SOURCE